Update the inventory first, then bring the registration into line with it — not the other way round. The Data Controllers’ Registry (VERBİS) exists under the Personal Data Protection Law (No. 6698), and what it records has to be accurate and current: the purposes of processing, the categories of data, the recipient groups, the retention periods and any transfer abroad. A registration that has quietly gone stale — new processing activities, new suppliers, retention periods that have changed — becomes evidence against you in an audit and raises the exposure to an administrative fine.
So the update is not a form-filling exercise. It means reviewing the processing inventory, making it consistent with your information notices and your retention-and-destruction policy, and only then correcting the VERBİS fields. Where a material change occurs — a new system, a new purpose, a new transfer — the entry has to be updated within the period the legislation allows, which is why we tie VERBİS maintenance to your change-management process and to an annual review rather than to a scramble before an audit.
Shall we apply this matter to your situation?
Tell us your specific situation in a few sentences; we'll assess it with the right team.